CVE-2024-23556

Description

References

• support.hcltechsw.com/csm · Vendor Advisory

bigfix platform 的其他漏洞

• CVE-2026-21767低危 3.3HCL BigFix Platform is affected by insufficient authentication.  The application might allow users to access sensitive areas of the applicat…
• CVE-2026-21765高危 7.8HCL BigFix Platform is affected by insecure permissions on private cryptographic keys.  The private cryptographic keys located on a Windows …
• CVE-2024-42193高危 8.1HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario…
• CVE-2024-42200中危 5.4HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak validation of user input.
• CVE-2024-42189中危 6.5HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack, due to a potentially weak validation of an API parameter.